GHSA-xmqp-6cj2-2hh3

Exploit Intelligence

• Proof of Concept for CVE-2025-40778: BIND 9 DNS Cache Poisoning via unsolicited Additional Section records. (github-poc-repo)
• Proof of Concept for CVE-2025-40778: BIND 9 DNS Cache Poisoning via unsolicited Additional Section records. (github-poc-repo)
• Forensic triage of DNS cache poisoning in legacy hardware. Includes PCAP analysis of 839-byte unsolicited record injections, CVE-2025-40778 mapping, and remediation via hardened Unbound (DoT) on Arch Linux. (github-poc-repo)
• Forensic triage of DNS cache poisoning in legacy hardware. Includes PCAP analysis of 839-byte unsolicited record injections, CVE-2025-40778 mapping, and remediation via hardened Unbound (DoT) on Arch Linux. (github-poc-repo)
• Forensic triage of DNS cache poisoning in legacy hardware. Includes PCAP analysis of 839-byte unsolicited record injections, CVE-2025-40778 mapping, and remediation via hardened Unbound (DoT) on Arch Linux. (github-poc)
• Forensic triage of DNS cache poisoning in legacy hardware. Includes PCAP analysis of 839-byte unsolicited record injections, CVE-2025-40778 mapping, and remediation via hardened Unbound (DoT) on Arch Linux. (github-poc)
• Proof of Concept for CVE-2025-40778: BIND 9 DNS Cache Poisoning via unsolicited Additional Section records. (github-poc)
• Proof of Concept for CVE-2025-40778: BIND 9 DNS Cache Poisoning via unsolicited Additional Section records. (github-poc)
• https://gist.github.com/N3mes1s/f76b4a606308937b0806a5256bc1f918 (github)
• BIND 9 Cache Poisoning via Unsolicited Answer Records (CVE-2025-40778) (github)

…and 6 more exploits

Timeline

• CVE Published
• Apr 10, 2026 Security Advisory